For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

m_radstake_1687's avatar
m_radstake_1687
Icon for Nimbostratus rankNimbostratus
Oct 03, 2014

How to configure SNAT to use a Virtual Server as source IP?

Hello,   I'm pretty new in F5 configuration. I read quite some F5 documentation and several posting on SNAT but I couldn't figure out how to configure the F5 to route traffic (stateful) from my in...
application delivery
LTM
security
snat
m_radstake_1687's avatar
m_radstake_1687
Icon for Nimbostratus rankNimbostratus
Oct 03, 2014

Hi Nathan,

 

I've tried your proposed solution but I can't get it working:

 

ltm virtual /Common/VSSMSC { destination /Common/10.44.36.122:0 ip-forward mask 255.255.255.255 profiles { /Common/fastL4 { } } source 0.0.0.0/0 translate-address disabled translate-port disabled vlans { /Common/vlan28 } vlans-enabled }

 

I made a tcpdump-trace in the F5 and see the traffic arriving at the Self-IP 192.169.28.6 (vlan28). However I don't see the traffic arriving at host 10.44.36.122.

 

What I'am wondering is how the F5 knows it should use 10.44.36.123 as the source IP when sending the packets to 10.44.36.122 ?

 

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Oct 03, 2014
    .123 looks like a virtual server address, it wont translate to that. In the forwarding VS setup configure a SNAT pool or SNAT automap (automap translates behind egress interface ip on the 10.44.3.120 subnet)